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REPORT 



TO THE BRITISH CKIBT^ OF STAFF AMD TO THE U.S. CHIEFS OP STAFF 
OF THE U.K./U.S. COMMUNICATIONS SECURITY CONFERENCE 
mem m mndon m JULY. 1961. 



1. In their endorsement of the report of the U.K./U.S. Conmunications Security 
Conference which was held in Washington in September 1930 the British and the 
U.S. Chiefs of Staff agreed: 

"That there he annual conferences an these subjects for the 
next four years to he held alternately in London and 
Washington, the first of these to he held in London in 
approximately nine months time". 

2. In accordance with the above directive the 1951 Conference was opened in 
London on 6th July and closed on 31 at July. The following items were discussed 



On-line Cypher Machines. 

Off-line Cypher Machines. 

Replacement of the C.C.M. by BRUTUS. 

Combat and Low Echelon Cryptosystems (including Authentication) • 
Merchant Ships Crypto systems. 

Meteorological Cyphers other than Cifax. 

Cifax. 

Ciphony. 

Cypher Key Generation. 

Secure Wrapping of Cypher Material. 

I.F.F.: Security aspects. 



3. Reports of the various working parties which discussed the above listed 
subjects are held both by the Director, Armed Forces Security Agency, Washington, 
and the Secretary, Cypher Policy Board, London. 

4. The programme of the Conference included a full and frank exchange of views 
on all the items listed above, demonstrations of such equipnents as could be made 
available, and a series of visits to establishments concerned in the research 
and development of communioations security equipment. 

i 

3. The major recommendations of the Conference are that:- 

(a) there be complete interchange of all projected equipments and 
technical information in the field of ccnmunlcations security so that 
the U.K. and the U.S. may carry out operational and security 
evaluations; 

(b) there be visits of technicians as required and particularly whenever 
azy equipment is ready for demonstration; 

« 

(c) in connection with the Brutus Cryptosystem: - 

(l) there be no restriction on the level at which this system 
may he used, but, in accordance with the agreement between 
the British and the U.S. Chiefs of Staff, disclosure of the 
BRUTUS cryptosystem should be confined to the appropriate 
authorities in the U.S. , U.K. , Canada, Australia and 
New Zealand; 
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(ii) the use of this system b£ extended to United Combined Naval 
Low Echelon Communications; 

(lii) A.F.S.A. and C.P.B. detezmine the operational prooedure and 
the rules for the physical safeguarding of this system; 

(d) the U.K./fa.S. J.C.-E.Cs. he asked: 

(i) to State what oomhined operational requirement exists for 
on-line cypher equipment ; 

(ii) to define the combined requirement for Air-Ground ozyptosystems. 

(ill) to define the combined requirement for teleprinter facilities 
to he incorporated in new off-line cypher machines, including 
' suph aspects as the teleprinter alphabet, keyboard and upper 

case facilities; 

(iv) to state whether the "Personal Identity" recognition facility 
in I.F.F. equipment need be guarded by cyphering; 

ii 

(e) the next Conference take place in three phases to he held consecutively 
in the following order, to ensure the closest liaison between the 
cammuninations planning staffs, the security experts and the engineers 

(i) Meeting between engineering and security experts of A.F.S.A. 

and C.P.B, to exchange detailed technical information and views. 

(ii) Meeting between A.F.S.A. and C.P.B. to detezmine engineering 
possibilities and security standards. 

(ill) Meeting between U.K. and TJ.S. o cmraunicat ions planning staffs 
and representatives of A.F.S.A. and of C.P.B. to examine and 
define combined operational requirements and, where possible, 
to select equipments to meet them. 

(f) the next Conference be held in Washington in April or May 1932. 

6. The major reocnmendat ions in paragraph 5 above are submitted for the approval 
}of the TJ.S. Chiefs of Staff and of the British Chiefs of Staff. 

The detailed conclusions of the individual Working Parties, as endorsed by the 
Conference, are being submitted to the Director, Armed Forces Security Agency, and 
to tte Oypter Policy Board for approval and further action. 



PL 86-36/50 USC 3605 



Signed; Colonel S.P. Collins, TJ.S. Army. 
Chairman of TJ.S. Delegation 
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UK/US Communi cat iona Security Conference 1951. 



On-Line Cypher Machines* 

Report of forking Party 1 
aa approved by the Executive Committee. 



1. The .forking Party reviewed the on-line cypher machines, 
available and projected, listed in paras. 3A - 3C below. 



2. The Working Party discussed the possible operational 
requirements which the U.K. and U.S. Services have for such 
equipment and agreed that they appeared to fall into three 
categories: 

A. Fixed Services (i.e. Synchronous exclusive 

point-to-point circuits) 



B# Network Operation (including broadcasts) 

C. Special Purposes (e.g. Hazardous operations, naval 

broadcasts, special missions, 

low echelon and combat purposes etc.) 

3« The Working party considered that It was not for them to 
determine whether there is a Combined requirement for equipment 
of this type. But if the UH/tJS JC-E 03 .or other competent authority 
decides that there is such a requirement, then it is recomnended 
that the requirement be met by selection from the equipments listed 
below in accordance with the circumstances of the case. 




A. Fixed Services. 

(1) If the requirement arises now , the only equipments which 
could meet it are:- 

(a) Apparatus 5 U.C.O. No. 1. Synchronous device using 
one time 5 unit tape. Size = One 6 foot x 19 inch 
rack per duplex terminal. Gives traffic flow 
security. Now in production. 

(b) Circuit MERCURY. Synchronous 31 way permuting machine 
using a 6+4 double rotor maze and mechanical 5/31 
converters for 5 unit code operation. Size s Twa 
consoles and one 6 foot x 19 inch rack per duplex 
torrainal. Now in production. 

(ii) The folio-wing additional equlpmonts should also be 

considered but will not bo available for at least two years:- 
# 

(a) AFSAM 15. A synchronous modified version of AFSAM 9 
using nine 36 point rotors as a 32 -way permuting 
machine with built in 5/32 conversion for 5 unit code 
. operation. Gives traffic flow security and automatic 

message numbering. Size = One 6 foot x 19 inch rack 
per duplex terminal. 

/(*) 
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(to) <tT?TTflHQxvB a twin channel synchronous ays tern using 
subtract or cypher key derived from nn electronic 
key generator using multl-ccld-cathode tubes. Gives 
traffic flow security. Size * One 6 foot x 19 inch 
rack per twin channel duplex terminal. 



B. Network Operation 

(i) If the requirement arises now , the only equipment which 
could meet it is:- 

(a) AF8AM 9 A non- synchronous permuting machine using 
nine 3b point r tors and 5/32 conversion lor 5 unit 
code operation. A light wei, ht forwrrd area equipment* 
Size = 16 x 12 x 6 inches, weight 27 ^ounds exclusive 
of teletype ancillary equipment. 

(11) The following additional equipment should also toe considered 
tout will not toe availatole for at least three years :- 

(a) ROLLICK MK II a non-sync hr onous device using 

sutotr^ctor cypher key derived from an electronic key 
generator using multi-cold-cathode tutoes. Slzo = will 
not exceed one 4 foot 6 inch toy 19 inch rack. 

(Note: ROLLICK Mk I is cryptographically unsuitable 
for network operation). 



C. Special rurooses 



If a combined c omrauni cation requirement arises at any time 
the following equipments, in addition to the Be listed above, 
might toe availatole and should toe considered :- 




(i) AFSAM 309* A non-synchr onous device using subtracter 
key derived from one time 5 unit tape. Consists of r 
basket containing a 5 unit tape render to toe inserted 
into the AF8«M 9* Size and weight of totrl equipment 
as for AFSAM 9. 

(ii) rtFgAM 44* A non- sync hr onous equipment which transmits 

"on Iine M and receives "off lino". T&pe operated only. 

Hoe two sensing heads, one for the message tape end 
one for the one-time key tape. Approximate weight 
15 pounds. Size =0.5 cubic feet. 

(ill) AFSAM 45 * A non-synchron us equipment designed for use 
witti a printer or tape transmitter giving sequential 
5 unit signals. H n s one sensing head (for onetime 
key tape) and selector mechanism. Approximate weight 
20 pounds. Size =0.5 cubic feet. 

(iv) ROLLICK MK. I A non- sync hr onous device using subtracter 
cypher key derived from an electronic key generator using 
multi-cold-cathode tubes. Size = one 4, foot 6 inch x 
19 inch rack. Now in production. 

i 

(v) ROCKEX a non-synchronous device using subtract or key 

derived from one-time 5 unit tape. FrcviJes an all-letter 



x These equipments will interwork. 



/crypt. 
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crypt. Transmits ’'on-line*' and receives "off-line". 
Has two sensing heads, one for the message tape and 
#ne for the key tape. Size a (including its own 
table) 20 inches x 22 inches x 38 inches (high); 
total weight about 200 lbs; exclusive of ancillary 
equipment. Now in production. 

2l. The Working party further recommended that all projected 
equipments and detailed information about them should be exchanged 
at the first opportunity so that the U.K. and the U.S. could carry 
out operational and security evaluations. 



10th July. 1951. 



* 
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UK/US Communications Security Conference 1951 . 



Off-Line Cypher Machines. 

Report of /forking Party J2 

* 

as approvodf'by the Executive Committee. 

1. The Working Party devoted a full day to a review of bff-llne 
cypher machines which are in various stages of research, development 
and production hut which are not in current ubc. 

2. The following machines came under review, those marked with 
an asterisk being demonstrated:- 



1 




Relevant Papers 






U.K. 




ERUSA C/S 


1* 


FORTEX (D.U.F.1) 


Description 
Security assessment 
Security assessment 


508 

509 

12 


2* 


SINGLET 


Description of 
bigrammlng device 


512 


3. 


. PENDRAGON 






4? 


Per outing 
M. 209 


Description 
Security 'assessment 


504 

513 


5. 


Electronic 
Cypher machine 


Description 


515 


> 6 ‘ 


do. 


Description 


516 


7? 


ROCKEX: Security 
oiodlfications 


Description 

i 


517 




U.S. 






8* 


AFSAM 7 


Description and security 
assessment 
Description and security 
assessment 
Security assessment 


1 

13 

536 


9. 


AFSAM 36 (M.C.M.) 


Description and security 
assessment 
Description and security 
assessment 


3 

15 


10. 


AFSAU 47 (P.C.M.) 


Description and security 
assessment 


16 


11? 


DEM 17 


Description 


18 
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Description and security 

assessment 



Description. 



ERU3A C/8 
19 
ko 



Others 

11+» M.209: French 

modifications 



Description and security 

assessment 



518 



3* The .Vorking .tarty wish to record that there was the most 
free discussion of all aspects of these machines, that the 
resultant interchange of views was of great value to the 
representatives of both countries and that no important points of 
disagreement came to light. 

U. The forking iarty further recommended that all projected 
equipments and detailed information about them should be exchanged 
at the first opportunity so that the U.K. and the U.S. could 
carry out operational and security evaluations. 
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U.K./U.S. CCMMONIGAIIOMS SECURITY COMEERBNCE 1951. 

Replacement of the C.C.M. by BHUTUS and Improvements to the Existing C.O.M. 



Report of Working Party 3 
aa approved tar the Executive Committee. 

A, Replacement of the O.C.M. by BRUTUS, 



1. The BRUTUS MAZE. * 



The Working Party considered the security of the maze for the BRUTUS 
cryptographic system and made the following recommendations; - 

(a) that the ROTOR MOVEMENT should he such that the rotors in positions 
two and six should step in opposite directions to the rest of the 
rotors: these latter step in the direction of the present COM (AJAX); 

(h) that the ROTOR STEPPING ORDER should he as follows 



(l) Rotor 4 steps with each encyphement. 

(iiJ Rotor 6 steps if rotor 4 is in a notched position, 
(iii ; Rotor 2 steps if hath rotors 4 
(ivi Rotor 7 steps if rotor 2 is in 

(vJ Rotor 1 steps if rotor 7 is in 

(vi) Rotor 5 steps if rotor 1 is in a notched position, 

(vii) Rotor 3 steps if rotor 5 is in a notched position. 



and 6 are in notched positions, 
a notched position, 
a notched position. 



(c) 



that REMOVABLE GAM CONTOURS sb reo amended hy the 1930 U.K./U.S. 
Communications Security Conference for use with the existing C.C.M. 
should he adopted fpr BRUTUS and that the U.K. and the U.S. 
technicians should exchange technical information and prototypes in 
order that the most suitable design should he adopted for cannon use 
hy all Services. As f during operation, only one side of a rotor is 
used to effect The stepping motion eaoh set of rotors should he 
provided with a set of removable cam contours with identity numbers 
hut with no alphabet and a set of alphabet rings without contours. 

In use, therefore, each rotor would he fitted with one removable cam 
contour and one alphabet ring; 



m 
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(d) that the number of notches in the NOTCH PATTERN on any removable 
cam contour should not be other than 7, 9, 11, 15, 17 or 19. 

The questions of consecutive notch patterns, the possible provision 
of special high Incidence notoh cam contours for the centre rotor 
and the reversibility of the notch ring should be the subject of 
further study and an exchange of views between the U.S. and U.K. 
cryptographic security agencies; 

(e) that a SET OF ROTORS should consist of ten rotors; 

(f) that the WIRING- of each rotor in a set should be different and 
that the wiring of each individual rotor should contain 18 
distinct intervals (l.e. different wire lengths), the remaining 
intervals falling where they nay. 

In considering the rotors fog the BRUTUS cryptosystem the Working Party took 
note of the fact that for the C.C.K. the U.K. and the U.S. Services were 
committed to rotors of different sizes and recommended that there should be no 
attempt at standardisation for existing equipments. 



2. Other BRUTUS Security Factors. 

The Working Party considered the other security factors relative to the 
BRUTUS cryptographic system. 

(a) Crapilation of Key Lists. 

(i) The Working Party took note of a U.S. proposal to produce 
an equipment to speed up compilation of key lists and 
recramended that the U.K. cryptographic agency be provided 
with details as they heocme available. 

(li) The Working Party took note of the U.K. method of printing 
key lists with the first day of the period at the bottom of 
the sheet to facilitate early destruction of obsolete keys in 
hazardous areas and recramended that the application of this 
method to BRUTUS key lists should be examined. 

(b) Indicator and Ope rat inn: Prooedures. 

The Working Party took note that the prime user requirement was for 
the simplest procedure compatible with security. Subject to this 
general observation the Working Party recommended that the 
Indicator Procedure and the Operating Procedure for the BRUTUS 
cryptosystem should be the subject of further study and an exchange 
of views between the U.K. and the U.S. cryptographic security agencies. 





the Working Party roo emended that there should he no restriction on the 
level at which the BRUTUS cryptosystem oould be used but that in accordance with 
t he ag reement between the U.S. and the U.K. Chiefs of Staff disclosure of the 
BRUTUS cryptosystem should be confined to the appropriate authorities in the 
U.S.A., U.K. , Canada, Australia and New Zealand# 

4> Requirement for Tele-printer Facilities in machines embodying BRUTUS. 

(a) The forking Party considered the following draft recommendation made by 
representatives of the B.J.C.E.B. and the U.S. J.C.-J3.C. at their 
joint meeting held in London in June 1 951 : - 

"The B.J.C J3.B. and the U.S. J.C.^B.C. after considerable 
discussion agreed that it was desirable for Canbined off-line cypher 
equipments, which would be designed in the future, to handle the full 
range of the Combined teleprinter alphabet and to operate from a 
standard teleprinter keyboard" . 

(b) The forking Party noted that the B.J.C.E.B. and the U.S. J.C.-E.C. were, 
at the time, discussing only off-line equipments. Had on-line equipment b 
been under discussion the same recommendations would, no doubt, have been 
made. 



(o) After considerable discussion the forking Party concluded, that the 
present variation in designs of the keyboard on existing U.K. and U.S# 
off-line cypher equipments arose from a fundamental difference in message 
writing procedure adopted by the respective Service Staffs. Until this 
difference in staff practice was resolved it would be extremely difficult 
to resolve the cryptographic problem. Bearing in mind that the new series 
of A.G.P. *s might help to resolve the staff differences, the forking Party 
recommended that the provision of full teleprinter keyboard facilities on 
future off-line cypher machines should be the subject of further study 
and exchange of views and that this subject should be raised again at the 
next U.K./U.S. Communications Security Conference. 



B. The Existing O.C.M, 




(a) The forking Party reviewed the steps taken to improve the security of the 
existing C.C.M. In accordance with the recommendations of the 
1930 U.K./U.S. Communications Security Conference and noted: - 



(i) that additional rotors to increase the size of all sets used for 
U.K./U.S. traffic from 10 to 20 rotors per set were in course of 
production and that all U.K./U.S. C.C.M. cryptosystems should be 
based on sets of 20 rotors by 1st January, 1933; 



/(ii) 
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(li) that the U.K. and the U.S. had solved the problem of fitting 
removable oam contours to their respective rotors but no exchange of 
suoh rotors for trials had yet taken place. As soon as this exchange 
shall have taken plane and the final design had been agreed, production 
will be initiated and the system introduced as soon as possible; % 

(iii) that a new disguised Indicator procedure had been worked out by 
the U.K. and U.S. cryptographic security agencies and this procedure was 
awaiting ratification by the U.X.-U.S. J.C.-E.CB.with a view to its 
introduction on a Combined basis as soon as possible; 

(b) The Working Party considered the operating procedures for C.C.M. at 
present in force and rec amended:- 

(i) that VARIABLE SPACING should be applied to all messages. 

The slight difference between existing U.K. and U.S. procedure has 
been reconciled and steps will be taken to introduce the agreed 
procedure as soon as possible; 





11th 



(li) the BISECTION PROCEDURE should be applied to all messages and in 
long messages should be applied once in each cryptographic part; 



(iii) that SHORT MESSAGES should not he padded; 



(iv) that the use of SIMPLEX SETTINGS should be considered with the 
present C.C.M. (AJAX) whenever overall long-term security is required 
at the higher levels irrespective of whether the other security 
refinements recommended had been introduced and, with this end in view, 
that a study should be made of the problems involved in the compilation, 
production and operational use of Simplex Settings with the C.C.M. ; 



(v) that C.C.M. PROCEDURE for use on NATO crypt onets should be the 
same as an combined nets. 



July. 1951. 
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U&/US Communications Security Conference 1951. 

Combat and Low Echelon Cryptosystems (Including Authenti cation"! 

Report of Working r a 

aa approved by the Executive Committee. 



1. The Working Fart y took as the basis of their deliberations 
Annex 1 F* of the paper C/8C 55 $ dated 21st June, 1951 > prepared 
by the UBy\jS JOECs. 



Combat Systems 



2. (a) Navi 



IT WAS AGREED that since the UK/US JC-ECs. had not 
reached agreement as to whether a Combined major war 
, vessels tactical cryptosystem was required, no 
progress on this item could be made. 

(b) Army 

(i) Air Support Control Codes. 

A. IT WAS AGREED: - 

1. that the requirement under this item would 
eventually be met by the provision of. suitable 
clphony equipment; 

2. that pending the provision of such equipment it 
would be necessary to use special purpose codes. 

B. IT WAS NOTED:- 

that the British Army were considering the use of 
a short vocabulary code recyphered by one time 
pad (A3REX) for this purpose. 

C. IT WAS RECOMMENDED.— 

that ASREX should be studied with a view to 
possible combined use. 

(ii) Map Reference Codes. 

A. IT WAS AGREED: - 

1. that the requirement under this item would 
eventually be met by the provision of suitable 
ciphony equipment; 

2. that pending the provision of such equipment 
it would be necessary to use special purpose 
codes. 
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B. IT WAS NOTED :- 

1. that the U.S. Army relied cn locally produced 
codes for this purpose. 

2. that the British Army used UNICODE hut that 
the security of the system was low. 

3. that the British Army was considering the 
following systems for this purpose 

MAPFRAX 
Double MAPLAY 

C. IT WAS RECOMMENDED :- 

that MAPFRAX and Double MAPLAY should be 
studied with a view to possible combined use. 

(iii) Status Reporting Codes 

Forward Echelon Voice Codes 

A. IT WAS NOTED:- 

that the UKytJS JC-ECs. considered that there 
was no requirement for Combined agreement on 
these systems. 

(o) Air Force (Ground-Ground^ 

(i) Aircraft Movements Code 
A. IT WAS AGREED : - 

that the requirement under this item might be 
met by the provision of a suitable light 
weight off-line machine crypto-system. 

D. IT HAS NOTED: - 

that a special purpose code for this purpose 

was currently under discussion by the UK/tiS JC-ECs. 

f 

(ii) Friendly Aircraft Approach Code 
Ground Radar Reporting Codes 

A. IT <7A S NOTED: - 

that the UK/US JC-ECs. considered that there 
was no requirement for Combined agreement on 
these systems. 



(d) Air-Ground 

(i) Maritime and U-boat Warfare 

3omber and Supply/Troop Dropping Operations 

A. IT WAS AGREED :- 

1. that the requirement under this item might be met 
by the provision of a suitable light weight off-line 
machine cryptosystem. 

TOP SECRET a . 
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2. that pending the provision of such a system 
it would toe necessary to use vocabulary codes 
for this purpose. 

B. IT WAS NOTED:- 

that the provision of such vocabulary codes 
was currently under discussion toy the 
UK/US JC-ECs. 

(ii) Meteorological 

A. IT WAS AGREED :- 

that consideration of this item should toe 
referred to Working Party No. 6. 



A. IT WAS AGREED :- 

1. that the requirement under this item might 
toe met toy the provision of a suitable light 
weight off-line machine crypto-system. 

2. that pending the provision of Buch a system 

it would toe necessary to use a vocabulary code 
for this purpose. 

D. IT WAS NOTED: - 

that 'the UK/US JC-ECs. had recently agreed 
that such a Combined code should toe provided 
and that AFSA and GCHQ were currently engaged in 
its compilation and production. 

(f) Authentication 

A. IT .JA8 NOTED :- 

1. that authentication publications were currently 
under discussion toy the UK/US JC-ECs. 

2. that AFSA had under development two 
authentication devices for challenge and reply 
use on limited communication neta:- 

aSAD 2 (x - 1) 

ASAD 2 (x - 2) 

B. IT WAS RECOMMENDED ;- 

that further consideration should toe given to 
ASAD 2 (x - 1) and ASAD 2 (x - 2) with a view 
to their possible adoption for Combined use. 
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Low Echelon and Combat Systems 



n General 



3. The three main Combined low echelon and combat requirements 
stated by the J.C.-E.C. are:- 

(a) Naval low echelon communications 

(b) Air-Ground Communications 

(c) Amphibious Communications 

4. The Working Party considered the hand cryptosystems which 
will be available within the immediate future. It was agreed that 
the following will be available :- 

k Strip 

I LINEX 

PLAYFEX 

Vocabulary Codes 

5. The Working party also considered the machine systems 
likely to be available for Intermediate and long term solution 
of the requirements in paragraph 3 above. These machine 
systems are:- 



POHTEX 



It was noted that:- 



U.S. 

Ma Ca Ma 

AFSAM 7 
AFSAM 47 
DEM 17 



(a) delivery of the first 30 models of PORTEX for field trials 
was about to begin. The date on which quantity production 
could begin depended on the length and outcome of field 
trials but tools existed for the manufacture of a limited 
number of machines should they be required in emergency 
prior to the completion of field trials. By the end of 
1933 production could be built up to 100 machines a week; 

(b) arrangements for the production of MCM were well in hand. 
Providing the equipment proved satisfactory delivery would 
start within a year and it was expected that 2,000 machines 
would be available within two years. Thereafter there would 
be a production potential of 30-40,000 machines a year; 

(c) although Service test trials were not yet complete, tooling 
for production of AFSAM 7 had begun. It was expected that 
by 1932 the production capacity would be 3 t 000 machines a 
year; 

(d) arrangements for the production of AFSAM 47 would follow. 

No dates or production capacity could yet be definitely 
stated, but a production rate of 300 a month could be 
attained by 1933; 



/(e) 
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(e) a first model of DEM 17 was demonstrated to the 

Working Party and development of an improved model 
was toeing pursued as rapidly as possible* 

6* For security reasons, and in the light of present 
cryptographic techniques, it was agreed that, wherever operational 
circumstances permitted, more than one cryptosystem should toe 
used for Comtoined literal cypher purposes* 

7* Naval Low Echelon Communications. 

(a) Short term solution. 

It was agreed that only hand Bystems are available 
for limited Comtoined naval use, and that the choice lies between 
the following two systems 



Strip 

PLAYFEX 

It is recommended that as soon as possible U.K. and U.8. should 
carry out operational and security evaluations of the above systems 
respectively, with a view to reaching agreement on which ^system 
should toe used. 

(to) Intermediate and long term solutions. 

It was agreed that limited Comtoined naval communications 
should toe treated as an exception to the principle recommended in 
paragraph 6 above and that the Brutus cryptosystem should toe used 
tooth for low echelon and high echelon communications. It was noted 
that after trials of AFSAM 7 and AFSAH 47 the U.S.N. are likely 
to adopt one of those equipments for intra-Naval use. The Working 
Party therefore recommended that as a matter of urgency, the U.K. 
should develop a parallel machine employing the BHUTUS technique. 

8. Air- Ground Communications. 



Certain aspects of air-ground communications have already been 
covered in paragraph 2(d) above. The Working Party considered that 
the requirement for comtoined cryptosys terns for air-ground communicat- 
ions requires clarification. Where a machine requirement, exists, 
it could probably toe met toy one of the equipments described in 
paragraph 5 above. 

9. Amphibious Communications. 

(a) ghort term solution. 

This is covered in paragraph 2(e) B above. 

(to) Intermediate and long term solution 

It was agreed :- 

(1) that there is probably a requirement for a mechanically 
operated off-line cypher machine and for an electrically 
operated analogue of such machine. 
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X ii) that the M.209 principle appeared leas suitable 
, than a permuting maze from the security angle, 

and also owing to the difficulty of providing 
sufficiently speedy operation in an electrical 
analogue. 

(ill) that it is not yet possible to make detailed 

recommendations on what machine should be used. 

10. Exchange of Equipments. 

f 

It was recommended that all projected equipments and detailed 
information about than should be exchanged at the first 
opportunity so that the U.K. and U.S. could carry out operational 
and security evaluations. 
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Merchant Ships* Cryptosystems 
Report of Working Tarty 5 
as. approved by the Executive Committee 



1. The Working Party took as the basis of their deliberations 
Annex 'G* of the paper C/SC 55* dated 21st June, 1951* prepared 
by the UK/US JC-ECa . 

^?he present Situation. 

2. The Working party reviewed the present situation. 

IT WAS NOTED 

(a) that a quantity of merchant ship crypto-material 
left over from World War II was available for 
issue in the event of war in the immediate future. 

(b) jfchat arrangements for the production of the Merchant 
'Ship Cipher Device (AGP 212) and associated key 
material, which would replace Y7orld War II systems, 
had been agreed between AFSA and GGHQ. production 
would begin immediately. The Device and 
associated key material should be available for issue 



lacement of the Merchant Ship Cipher Device (ACF 2121 by a Machine, 



3* IT WAS AGREED that the following proposed amendments to 
Annex T C* of the paper C/SC 55 should be forwarded to the UK/US 
JC-ECs. for consideration: - 

(a) Amend paragraph 1. to read:- 

tt 1. Combinod communications are required. 

It is essential that Canadian, U.K., U.S. and 
allied naval authorities and warships should be 
able to communicate with any Canadian, U.K., U.S. 
or allied merchant chip and with any neutral 
merchant ship trading in the allied inter est." 

(b) Amend paragraph 7 to read:- 

"7. Cypher Machine - Drive. Manual or power 
drive will be acceptable. If manual drive 1 b 
provided a power driven cryptographic analogue 
should also be provided •" 



A. 
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4. The Working Party reviewed the machine crypto-systems 
available and projected. These Weres- 

PORTEX 

MCM 

AFSAM 7 

AFSAM 47 

DEM 17 

Permuting M.209 

French M.209 

„ny now mnchlno which m-y be >i 
-cvclope- for low echelon 
use. 

IT WAS AGREED: - 

(a) that In selecting a suitable cypher me chine for 
merchant ship communications it was necessary to 
pay particular attention to the aspects of cost 
and simplicity. 

(b) that for these reasons provision of a merchant ship 
cypher machine was a separate problem not necessarily 
related to the problem of providing a low echelon 
cypher machine for Service use. However it would 
obviously be a great advantage If the same basic 
machine could serve both purposes. 

(c) that it was not possible at thiB stage to recommend 
a particular machine for merchant ship use since 
further development and experience of the various 
machines listed above was first required. 

(d) that failure to recommend a particular machine at 
this time would in no way delay solution to the 
problem since development of all possible machlres 
was progressing at a rate as rapid as available 
fundB permitted. 





1 ■ The Working Party took as the basis of their deliberations Annex of the 
paper C/SC 55, dated. 2lst June, 1951* prepared "by the UK/US JC-BCs. 

2. IT WAS AGREED that the following proposed amendment to Annex *&* of the 
paper C/SC 55 should be forwarded to the UK/UE JC-ECs. for consideration: - 

(a) Amend paragraph 2(c) to reads - 

) "(c) Manual (preferably one-time)". 

i 

Examination of the Combined Operational Reauirements. 



3. The Working Party reviewed the on-line czypto-syBtems available and 
projected. These were:- 



APSAH 15 

Apparatus 5 U.C.O. No. 1 
Circuit MERCURY 
ARTICHOKE 



Synchronous 



AFSAM 2 - 1 
APSAM 9 
ROLLICK 



Non - Synchronous 



Conventional one time tape systems 
IT WAS AGREED 

(a) that it was not possible at this time to select any particular 

equipment for Combined use. Selection tram, the above systems could 
best be made when the requirement for on-line equipment arose and 
depending on circumstances ruling at the time. 



a) Ge 



ion of Weather 



IT WAS AGREKD:- 

1-. that for UK/US use the present CCM modified for weather 

encyphennent (that is using a weather switch such as APSAM 100) 
could be used for this purpose as soon as the necessary 
modification kits, special rotors and key lists could be made 
available; 

2. that when the BRUTUS system replaced the present CCM for UK/US 
use it too could be used for weather enoyphezment provided 
special rotors and key lists were used. 

/(*) 
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(b) Weather Reporting Posts and Met. Reoonnaisaance Flights, 
A. IT WAS NOTED 



1 . that in the immediate future the UK Services intended to use 
one time pads; 

2. that AFSA had under development a digital form of the DEM 21 
(M.209 modified for one time tape operation) and that this 
equipment might prove suitable for the transmission of reports from 
posts and airaraft to collecting centres; 

3. that the U.K. had under consideration a modification to PQRIEZ to 
make it suitable for the encypherment of met. data. 

E . IT WAS AGREED i _ 




1 . 

2 . 



that the one time pad was the only system immediately available; 

that further consideration should be given to a digital form of the 
DEM 21 and PORTEX with a view to their possible adoption for this 
purpose. 



(c) Air-Ground. 



A. IT WAS NOTED:- 

1. that for the transmission of weather, information to aircraft in 
flight the Royal Air Force used the UCO system; 

2. that AFSA had under development two devices for this purpose:- 

■ 

ASAD 1 (X - 2) 

ASAD 1 (X - 3) 



5. IT WAS AGREED: - 




1 . 



that UCO was the only system immediately available, and should he 
considered for Combined use. It was used successfully during World 
War II by both the Royal and U.S. Air Forces; 



2. that further consideration should be given to ASAD 1 (X-2) and 

ASAD 1 (2-3) with a view to their possible adoption for Combined use 



3. that furthet development of ASAD 1 (X-3) was highly desirable in any 
case since it was also likely to be valuable in other fieldB, e.g. 
"Status" Reporting Codes; 



4. that for the transmission of landing weather information ciphoxy 
equipment is recommended as the long term solution-. 

i 

The Implications of NATO an the Foregoing Requirements. 



On-line Equiment. 

5. IT WAS AGREED :- 

that should it be deoided to issue on-line equipment to NATO powers, 
conventional one-tune tape systems were to be preferred. The use of 
these would protect UK/US cryptographic techniques and the equipment 
was the most likely to be available. 
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Off-line Equinnent. 

6. (a) General Dissemination, of Weather Information. 

A. IT WAS AGREED: - 

1 . that to protect UK/US cryptographic techniques the only system 
which oould he considered for this purpose was the present 
CCM modified for weather encyphezment (that is using a weather 
switch such as AFSAM 100) ; 

2. that owing to the small number of CCM machines available it was 
unlikely that this equipment oould be provided in sufficient 
quantity for NATO met. purposes for at least two years; 

3. that no other system ms available and therefore in the interim 
period it would be necessary for each NATO power to use its own 
national met. systems with ad hoc arrangements for the 
dissemination of information to other powers. 



(b) Weather Re-porting Posts and Met. Reconnaissance Plights. 



I 

i 



\ 

l 



I 

I 




A. IT WAS AGREED:— 

that provision of suitable systems for these purposes should he 
the individual responsibility of each NATO power. 

(c) Air-Ground. 

A. IT WAS AGREED 

1 • that it was highly desirable that a common system he held by all 
NATO powers for the transmission of weather information to 
aircraft In flight; 

2. that UCO was the only UK or US system ^mediately available for 
this purpose. 

Exchange of Bquirment. 

7. IT WAS RECOMMENDED that all projected equipments and detailed information 
about them should be exchanged at the first opportunity so that the U.K. and the 
U.S. oould carry out operational and security evaluations. > 



20th July. 1951. 



i 
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2. The Working Farty took note of Annex ’D' of the paper C/SC 55, dated 

21st June, 1951, prepared by the UK/US JC-ECs. They considered that joint 

operational requirements were at present too undecided for any combined 
agreement to be reached. 

3. The Working Farty agreed that, should a requirement arise during the 
next two years for an equipment for combined use, selection could only be 
ma.de from the following equipments which might be available in limited 
quantity : 

AFSAY 806 (referred to in Report of Working Party 8) 

AN/UXC 2 

METFAX 

It was recommended that all projected equipments and detailed infor- 
mation about them should be exchanged at the first opportunity so that the 
U, K. and the U. S. could carry out operational and security evaluations. 





£ 
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UK/03 Communications Security Conference 1951. 



CIPHONY 
Report of Wording Party fl 
aa approved lay the Executive Committee. 



1. The Working Party reviewed the following U.K. and U.S. 
Ciphony equipments and projects 




U.K. 



U.8. 



BANGLE 
HALLMARK I 
HALLMARK II 
PICKWICK 
D.70 
WHISPER 
SORCERER 
TRUMPETER 



APSAY 806 
ASAY 8 
ASAY 4 
ASAY 5 

AN/TRC 25-ASAY 7 
Vocoder basic research 



2. The Working Party had detailed technical discussions on all 
the items listed above. Including demonstrations where practicable. 

i 

3. The Working party took note of Annex 'E* of the paper C/SC 33, 
dated 21st June, 1931, prepared by the UK/US JC-ECs. but concluded 
that, for the present, no recommendations could be made about the 
selection of equipment to meet combined requirements as now 
stated. 

4* The Working party took note:- 



(a) that the U.S. Air Force considered that secure 
air/ground and air/alr communications were matters 
of the highest priority, and had therefore defined 
to A.F.8.A. the military characteristics of a 
ciphony system which A.F.S.A. was already committed 
to develop. 

(b) that existing U.S. U.H.F. and V.H.F. air/ground and 
air/air radio Bets could be used to transmit and 
deceive ciphony of the general type requiring binary 
transmission at a rate of about 24,000 bauds per 
second with virtually no modification to the sets 
concerned. 

(c) that the ciphony equipment AF3AY 806 could encypher 
black/white facsimile or 3 channel teletype as 
alternatives to speech. Furthermore that Bangle 
could be adapted to encypher half tone facsimile 
pictures. 
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5. The Working Party suggested that the U.K. and U.S. Services, 
in formulating their ciphony requirements, might find it helpful 

to make operational trials of pulse code modeulation as a 
communication technique without security equipment. The 
attachment of a security device to the P.C.M. equipment would not 
alter the communications characteristics of the latter. Obese 
trials would enable the Services to assess the inherent operational 
complications arising from the use of encyphered speech. 

6. The Working Party concluded that no tactical ciphony system 
in the 2-30 mcs. frequency range suitable for either shipborne 

or vehicular use would be available in the near future. 

7. The Working Farty recommended that all projected ciphony 
equipments and detailed information about them should be 
exchanged at the first opportunity so that U.K. and U.S. could 
carry out operational and security evaluations. 




f 
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1« The Working party reviewed the following equipments and 
projects for the generation production and checking of cypher key:- 



U.K. 

TR IMMER 

ROCKEX Key Generating 
Equipment 

5 U.C.Oa Key Generating 
Equipment 
Key Tape Checker 



U»B« 



ASAP 44 (high speed recorder) 
APSAL 3116 

One time Key Generator 
for AFSAY 806 



2« The Working Party took note that there was no combined 
operational requirement for key tape generating equipment. The 
3 unit Key tapes used hy both the U.K. and the U.S. are inter- 
changeable and the equipment of either nation could therefore be 
used according to circumstances. It was agreed that the combined 
standard of randomness detailed in Appendix a should be accepted 
and that the situation should be reviewed at all future conferences 
as a regular item of the agenda. 

3. The Working Party recommended the following exchange of 
Information: - 

^ (a) The U.S. to supplys- 

(I) Outline description together with photographs of APSAP 44. 

(il) A model of the 900 operations per minute perforator. 

(Ill) The manufacturing specification for paper tapeB together 
with samples of the 5 -unit and 7-unit Bizes, including 
the description of the ageing test with experience of 
wear on machines. 

(iv) Further Information on how the number of breaks had been 
limited in the recently supplied ROCKEX tapes. 

(b) The U.K. to Bupply:- 

(i) Pull details of the high speed Checker. 

(II) Details of "The Timms Counter". 

(Hi) A model of the 100 unit perforator (three headed punch). 



26th Juli 
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APPENDIX A 



Randomness in key is intended to prevent discrimination 
between key and the random expectation in the type of Key material 
generated. This is a quantitative effect and practical 
considerations place a limit on the randomness* 

The following limits have been agreed 

(i) Keys showing a deviation of 2 sigma or less from 
random in all counts are acceptable* 

(11) Any Key showing a deviation in any count of 4 sigma 
or more from random expectancy is unacceptable* 

(ill) No Key showing a deviation in any count of between 
2 sigma and 4 sigma from random expectancy may be 
used without further examination. 

(Note that these criteria may be stated either in terms 
of sigma as above or in terms off the appropriate 
probabilities.) 

2. Counts to be made must depend on the actual method of 
generation. However, the following counts based on stretches 
of at least 10,000 consecutive units of Key are common to all 
methods and will apply to all types of Key tapes. 



(i) 

(ii) 



m 



Frequency count of single units of Key, 

11 " " consecutive pairs of units of 

Key (for binary material the mod 2 sum of 
consecutive pairs). 



(ill) Suitable multi-unit counts to ensure correct 
operation of the generating and recording 
equipment (for binary material runs of 15 
consecutive delta dots and delta crosses are 
counted). 

3* For multi-level key these counts will be made for each 
lswel Independently and for the units of Key considered as one 
stream in the order of emission from the generator. 
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UK/US Crwtwmj cations Security Conference 1951 
Seouro Trapping of Cypher Material 

/ 

Report of Working Party 10 
aa approved by the Executive Committee 

1. The Working Party reviewed the systems of protecting azyptographio 
documents demonstrated by the British members as follows:- 

Security wrapped pads 

Ifeds with sealed edges 

Welded plastic envelopes 

2. The Working Party took note of Annex 'B f of the paper C/SC 55 , 
dated 21st June, 1951, prepared by the UX/US JC-BCs. and noted that none 
of the projected schemes could be expected to give protection under 
aLrcuastances other than those In which an Agent had only limited time 
and facilities at his disposal. 

3. The Working Party recommended that samples of the systems demon- 
strated should be supplied to the U.S. for study and ocmment. 

4. The Working Party recommended that there should be a continuing 
exchange of ideas and techniques. 
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UK/US Ccnmuni cations Security Conference, 1951 

I.F.F.: Security Aspects 

Report by Working Party 11 
aa approved by the Executive Conmittee 



1. The Working Party discussed In considerable detail the various U.K. 
and U.S. proposals for an I.F.F. Security System. 

2. The Working Party concluded that the techniques of neither nation had 
yet reached a sufficiently advanced stage for it to he possible to recafanend 
equipment for Combined use but they agreed that future development should 
take into consideration the following factors s- 

(a) That the code system should be inviolable to crypt analytic 
attack by cataloguing challenges and replies. To this end 
the total possible challenges and replies on ary one setting- 
should probably exoeed 10°, 

(b) That an automatic zeroising system operating whenever a 

' plane lands or crashes is desirable to reduce the risk of 

physical compromise of daily settings of the coding device. 

3. The Working Party recommended that the UK/US JC-ECs be asked to state 
whether the "Personal Identity" recognition facility need be guarded b7 
cyphering or not. 

4. The Working Party considered that the exchange of views had been most 
valuable and they further recommended that both A.F£S.A. and C.P.B. should 
maintain dose contact with those responsible for the development of new 
I.F.F. security equipment in the U.S. and U.K. respectively, so that, when 
combined equipment eventually came to be considered, the equipment developed 
in both countries would be cryptographically sound. 



20th July. 1951. 



n 
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Pro via ion of Upper Case Facilities on Off-Line. 

Cypher Machines for Combined U.K./U.S. Use, 

Report of Working Party No. 12 as approved 
try the Executive Ccmnittee. 



1 . The Working Party met to consider the provision of upper case- facilities 
on Off-Line Cypher machines for Combined Use. 

(a) for general usage 



(b) for weather traffic 



Only machines employing the CCM (AJAX) 
were considered. 



or the BRUTUS cryptographic systems 



2. As a basis for discussion the forking Party accepted the following 
principles :- 

(a) that it was not yet possible to agree on the design for a 
Combined off-line machine which would handle the full range of the Combined 
teleprinter alphabet and operate from a standard teleprinter keyboard 

(see report of Working Party No. 3 paragraph 4 .); 

(b) that the provision of limited upper case facilities on Combined 
off-line cypher machines was preferable to providing no upper case facilities 
at all. 



3. The Working Party considered the keyboard layouts of teleprinters, 
teletypewriters and off-line cypher machines already m production or about to 
be produced (see comparative -cable attached) and reached the following 
conclusions :- 

(a) Provision of Upper Case Facilities for CCM (AJAX). 

(i) General Usage. 



Except for the numerals and five punctuation marks the 
upper case characters on the Typex machine are non-standard. In addition, 
the Typex uses the Z circuit for FIGURE SHIFT; U.S. machines use the new 
J circuit. There is, therefore, no possibility of providing a general purpose 
Combined machine cryptosystem using upper case characters until the Typex is 
replaced in the U.K. Services. 

(ii) Weather Traffio. 



The provision of upper oase facilities for weather traffio in the 
CCM (AJAX) cryptosystem would require further consideration. Proposals to meet 
the requirement should be exchanged by A.F.S.A. and C.P.B. and, if possible, a 
decision should be reached before the next Conference. 



/w 
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(b) Provision of Limited Upper Case Facili ties on machines 
employing the BRUTUS principle, 

(i) The direct encryption of ten upper oase characters (the 
numerals 0-9) can he achieved "by adopting the following "basic wiring" scheme 
on AFSAM 47 (PCM), AFSAM 7, SINGIET and such other U.K. or U.S. equlpnents as 
may he designed for BRUTUS working 



X 

z 

Space 

Y 

J 

Figures 
Letters 
Lower case V 



Key to he taken through the X circuit 



n ti 



it ti 



n n 



ii n it 



vt IV 



ii ii 



ii ii 



X " 

Z ■ 

Y " 

Y 
J 

Upper case V circuit 

Y circuit 



(ii) If AFSAM 47 (KM) and S INSIST only were to work together the 
fallowing additional eight upper case characters could he encrypted 
"()/* 7 ,«. 



(iii) In the present CCM(AJAX) cryptosystem the letter Z decrypts 
as X. In this scheme, in addition, the letter J will decrypt as Y. 

(iv) For U.S. machines, the full scheme is incorporated in the 
present design for AFSAM 47 (PCM) and the limited (numerals only) scheme is 
incorporated in the design for AFSAM 7* 



(v) For U.K. machines: 

(1) It will not he possible to introduce the schemes in 
paras, 3(h) (i) and 3(h) (ii) above until the U.K. Services 
cease to use Typex with a BRUTUS adaptor. 

(2) For Combined working the bigrammlng feature on SINGUBT/ 
EENERAGON will not he used. 

(vi) In order to limit the differences between the above method for 
seouxlng limi ted upper case facilities and the bigrammlng method of securing 
full teleprinter facilities the U.K. Services will use the following wiring 
system on S INGLET/FENDRAGON . 



FIGURES KEY to he taken through J circuit 

BIGEAM KEY " ■ " " K " 

betters Her " " B M v n 

4. The Working Party made the following recommendations 

(a) that it he noted that until the U.X. and the U.S. Services cease to use 
their current equlpnents with the CGH(AJAX) or BRUTUS adaptors modification to 
provide upper oase facilities other than for weather traffic will he extremely 
difficult. _ 

(h) that until a Combined Communication Policy is agreed all cypher machines 
designed for UK/US use in the future should Include at least the limited upper 
oase facilities as set out in para. 3(h) (l) above. 



(c) that should the CCM(AJAX) he used for weather traffic the particular 
cryptosystem in question must handle weather traffic exclusively. 



Upper Case Equivalent 



Lil Li'J J SJLUiJj- 





E C EE 



H I 



Teletype 



Teleprinter 





3 i & 



3 % ® £ 8 



3 



3 U| X 



CSP 1700 



AFSAM 7 



AFSAM 47 
(PCM) 



SINGLET 



CSP 1700 
with ASSAM 
100 (Weathar 
Switch) 



3 G 




3 P 



H 


8 


H 


8 


£ 


8 


H 


8 

! 





tive Table of Umaer Case Characters 







n o p| cjj a 



9 



9 | 0 



9 





N 9 




T U V W 



5 7 ; 2 



5 







5 



/ 5 




2 / 6 



2/6 



6 








S 5 



S 5 






2 / I 6 I SPACE 





S 5 




n n 

fj ’ 



T 



L- 




Authorised by ACP 126 



Z = figures circuit. 
X = space circuit. 

V s letters circuit. 



No upper case. 



Current Production model ^ 

J Key used for figures ^ 

circuit. 



To give full teleprinter 
facilities Z, B, K, J, LF, CR 
are higraxmed. Bigram key 
used J circuit. 

















































































































